Comments on: MBR/Mebroot/Sinowal/Torpig is back – better than ever http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/ malware research, IT Security and life in general :-) Wed, 15 Jan 2014 03:13:55 +0000 hourly 1 https://wordpress.org/?v=3.9.40 By: kyle http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-40 Tue, 25 May 2010 23:00:52 +0000 http://www.trustdefender.com/blog/?p=65#comment-40 the phrase is “intents and purposes”, not “intense purposes”

]]> By: Jon Austenaa http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-37 Sun, 01 Nov 2009 00:58:37 +0000 http://www.trustdefender.com/blog/?p=65#comment-37 Norton Internet Security 2009 is NOT one of the best Antivirus Engines at all. At work I’ve had lots of problems, like Office Word closing if changing resolution and NORTON runs, lisence problems needing to download some fix app to fix, and lastly network functionality broken after an unsuccessfull Norton Internet Security uninstall. The Norton remnants in Add/remove programs control panel couldn’t find some path. After checking Symantecs website I was directed to a page that complained about some required to download an ActiveX component. This component failed to install and I had to download a file instead. That file wouldn’t run due to an invalid signature error. To fix that I had to register a ton of files with regsvr32. Im reccommending and installing Avast at work now.

http://www.jooh.no/root/pix/Norton_problems/

]]> By: admin http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-36 Wed, 15 Apr 2009 22:10:46 +0000 http://www.trustdefender.com/blog/?p=65#comment-36 Hi Peter,

as per the blog, the best way is to run fixmbr from the Microsoft Recovery Console as described e.g. here: http://www.precisesecurity.com/threats/bootmebroot/

You won’t loose any data, however please change ALL your passwords and other personal information as they are most probably compromized.

]]> By: Peter http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-35 Wed, 15 Apr 2009 16:14:58 +0000 http://www.trustdefender.com/blog/?p=65#comment-35 This is all great information…but now the question that everyone has is “How do we get rid of it so all of this stuff doesn’t happen?” I have tried running three programs and NONE of them have found it but my network provider knows that I have it. Would formatting the hard drive work? Can I back up my programs first without having the virus just jump on there and re-load when I reboot the system?

]]> By: TrustDefender Labs » New Mebroot/Sinowal/MBR/Torpig variant in the wild - virtually undetected and more dangerous than ever http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-34 Sat, 04 Apr 2009 11:28:41 +0000 http://www.trustdefender.com/blog/?p=65#comment-34 [...] MBR/Mebroot/Sinowal/Torpig is back – better than ever [...]

]]> By: car jacks http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-33 Sat, 14 Mar 2009 12:16:13 +0000 http://www.trustdefender.com/blog/?p=65#comment-33 It’s the first time I commented here and I should say you share us genuine, and quality information for bloggers! Good job.
p.s. You have an awesome template for your blog. Where did you find it?

]]> By: arerlockali http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-32 Thu, 05 Feb 2009 22:22:57 +0000 http://www.trustdefender.com/blog/?p=65#comment-32 Hi. Your site displays incorrectly in Firefox, but content excellent! Thanks for your wise words.

]]> By: Timur I. http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-31 Tue, 27 Jan 2009 21:23:55 +0000 http://www.trustdefender.com/blog/?p=65#comment-31 Wow! Thank you very much!
I always wanted to write in my site something like that. Can I take part of your post to my blog?
Of course, I will add backlink?

Regards, Your Reader

]]> By: zibex http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-30 Wed, 21 Jan 2009 23:31:56 +0000 http://www.trustdefender.com/blog/?p=65#comment-30 7ttqtg hi! nice site!

]]> By: Sinowal trojan: Three years old and just plain nasty. « Knowledge DB http://www.tidos-group.com/blog/2009/01/07/mbrmebrootsinowaltorpig-is-back-%e2%80%93-better-than-ever/#comment-29 Tue, 20 Jan 2009 12:47:59 +0000 http://www.trustdefender.com/blog/?p=65#comment-29 [...] malware running on the system. At first I didn’t see the significance of this, but the report “MBR/Mebroot/Sinowal/Torpig Is Back — Better than Ever” by TrustDefender Labs explains why this approach is devious and important to Sinowal’s [...]

]]>